This past month, Trustwave SpiderLabs observed that HTML (Hypertext Markup Language) file attachments had become a common occurrence in our spam traps, which is not unusual since malware is often delivered through phishing spam. Author: AlienVault
Related Tags:
html attachments
trickbot
Obfuscation
qakbot
JavaScript
T1204
T1566
T1055
AlienVault OTX
Associated Indicators:
CECFABCC1B8F0467A0F646D0A75BD3A94E71C1A2CA41380B75F3A60E7827D2B9
1CBC3422305B203BBA574A0D59263E377C61A198F229430131570045C59A3521
8AC0F6C2C31934801C4C6AE5606997B5C84A59290287059EC8EA68754921899A
https://valdia.quatiappcn.pw/6215169ae66111503f639b90.js
https://fatnaoacnsoxzssa.web.app/nyrsjhrgsdvxzzx/themes/708d225d43415316016978101b90d070.js
https://fatnaoacnsoxzssa.web.app/nyrsjhrgsdvxzzx/themes/435d220bee10a57b635805e70b50fd90nbr1657558944.js
https://valdia.quatiappcn.pw/619bbbfdfebf846b78059584.jsrnURLrn
https://valdia.quatiappcn.pw/62277afa5eab6b6f36639b73.js
https://fatnaoacnsoxzssa.web.app/nyrsjhrgsdvxzzx/themes/css/435d220bee10a57b635805e70b50fd90nbr1657558944.css